
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File: xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier: uhDqhNMfUHVOfJULTNM1dr01EqQfcMZ3bbuZ5OqsHKs=
Subject key identifier: 6F:7B:63:F0:6C:45:94:1F:7A:BF:79:8D:59:EA:5D:66:5B:52:8E:FD
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer: /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial: CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number: C9
Signing time: Thu 01 May 2025 05:00:37 +0000
Manifest this update: Thu 01 May 2025 05:00:36 +0000
Manifest next update: Sat 03 May 2025 05:00:36 +0000
Files and hashes: 1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: 1f/ryCCxu6ikY7JM9HWQBtMc09GgIztNwp4sbZ7tXfw=)
2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Validity
Not Before: May 1 05:00:36 2025 GMT
Not After : May 3 05:00:36 2025 GMT
Subject: CN=6812fff5-5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:60:81:e2:28:f4:21:1f:b7:25:5e:c3:6a:13:
17:9b:7a:38:4a:a9:a2:99:de:32:b6:7b:d6:96:a6:
fd:35:00:a8:e4:52:22:1c:a8:71:19:6e:97:1d:70:
a4:ee:5a:f9:15:73:25:15:d6:40:67:80:78:92:35:
b2:f2:39:d6:bf:ab:ac:e3:91:1e:65:8e:86:47:ef:
9d:91:35:4f:40:65:26:e8:f9:8a:f1:a3:39:5c:5e:
ca:05:76:4a:4f:55:32:25:5f:29:4d:02:77:c1:d5:
f6:23:97:37:90:a6:d0:03:f0:86:c6:62:8c:0d:3a:
b8:f8:90:ec:21:cf:76:ac:65:3c:34:aa:8d:29:3c:
61:e2:be:19:4b:cb:26:ba:ab:cb:89:d1:7d:ae:14:
78:3e:e8:06:54:c2:1a:0e:a9:d9:05:ef:22:a4:b5:
fc:87:ff:3f:3b:be:6d:81:6f:1e:bf:94:9b:5e:ff:
78:43:89:67:39:b4:e0:80:e3:c6:99:7a:cb:06:15:
93:7b:2b:f5:9c:ca:e9:2c:49:9c:41:6f:5a:f6:bf:
a5:fe:ad:5b:b2:0e:5c:29:77:7b:81:ed:4a:25:6e:
36:13:cc:dd:4e:2a:06:35:59:be:c9:d0:a7:98:ce:
1a:c8:7f:75:e2:b1:59:d3:73:16:36:c7:5e:3d:37:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:63:F0:6C:45:94:1F:7A:BF:79:8D:59:EA:5D:66:5B:52:8E:FD
X509v3 Authority Key Identifier:
keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:bd:7b:86:d4:50:d3:a6:9c:3e:ea:d5:9a:0b:63:6f:11:c4:
8d:ab:1a:38:58:36:c4:7d:90:c7:e2:43:02:a7:e4:df:1e:51:
e2:d1:f8:ff:92:e5:8d:a3:5f:31:20:9a:75:40:9e:66:12:ed:
bf:00:86:10:df:24:0f:ae:78:2a:42:10:f4:14:79:80:9e:f0:
1a:da:37:17:88:d0:ee:98:fe:24:9a:e5:53:b3:df:f1:5b:bf:
36:db:44:62:bd:53:26:6e:d8:13:6d:11:4d:e4:f9:73:0c:4a:
6a:27:0b:39:c8:bf:53:ce:1c:b6:a3:6a:2f:55:5c:37:47:ed:
7f:b3:b3:44:88:1c:84:58:e3:96:6a:16:a9:bf:70:c6:4f:21:
24:4f:d1:c5:d9:10:a4:5d:e4:8a:23:5e:e0:28:99:b0:53:b0:
7e:48:a2:c6:1f:70:37:7e:de:41:a4:7a:63:08:48:a3:1d:25:
3a:c4:30:7a:3a:3e:b3:73:f7:e3:8c:a6:ef:c4:83:d0:10:f2:
0a:92:c3:2b:18:e9:42:34:9a:c5:75:6e:b7:38:10:25:3c:bd:
ac:48:cd:47:6d:e5:39:34:77:a0:19:e0:98:43:32:8d:3a:af:
9e:1c:9c:59:a5:42:e6:4e:63:37:c7:3d:36:87:6c:bc:01:63:
84:6f:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:37:56 2025 by rpki-client